(Dec 31, 2018 11:20 AM)El Lobo Wrote: I have never said anything about copypasting. You probably hasnt reffered to me but I had to write it just in case you were. I just asked him simple questions about his malware. I do not ask for a sample nor anything and from his posts I can clearly see that he has very low knowledege about it. Sure, he managed to send some basic http request and all the basic stuff that goes with it that makes low end malware.
Oh it wasn't directed towards you. I just saw multiple people mentioning copy paste and wanted to mention that copy paste doesn't necessarily mean something bad :)
Dec 31, 2018 11:48 AM
(This post was last modified: Dec 31, 2018 11:50 AM by El Lobo.)
(Dec 31, 2018 11:30 AM)RCE Wrote: @El Lobo , Who the fuk u think u are to evaluate other people knowledge ? i think u forget ur place kid go back to the cave that u come from however, u will not get what u want.
if you think this is a basic botnet then GTFO and find other thread to trash it.
I can only evaluate something that I can read or see. From what I have seen from you I have drawed that conclusion. You are free to correct me and I am always eger to be proven wrong when someone have real arguments. Insults are not gonna cut it and they just prove that when you know you are wrong you begin to insult people without reason. This is public place and everyone is entitled to have his own opinion. If we were just to ask question as per your guide that you have written then this whole concept would have no sense.
(Dec 31, 2018 11:39 AM)Twistd Wrote: Oh it wasn't directed towards you. I just saw multiple people mentioning copy paste and wanted to mention that copy paste doesn't necessarily mean something bad :)
My thoughts exactly, its fine but when making malware they should have some more creativity.
Also, happy new year to you and everyone else, even to you OP.
Dec 31, 2018 12:18 PM
(This post was last modified: Dec 31, 2018 12:26 PM by Yattaze.)
Hey! This looks oddly familiar, intergrated botshop you say?
(Dec 31, 2018 12:18 PM)Yattaze Wrote: Hey! This looks oddly familiar, intergrated botshop you say?
Seriously though the panel is nearly a straight rip from Kardon, take the time to learn how to make your own.
For anyone wondering, there is a update to Kardon planned, plugins and the general shittness fixed
I wasn't advertising discord I was letting people know where they can contact me, dick
(Dec 31, 2018 09:42 AM)RCE Wrote: @Zettabit, GTFO with ur .net shit kid.
Says the fuck that was literally just trying to sell a .NET bot, yet got exposed for being a C+P skid. Learn to code a fucking panel and stop ripping shit.
how effective is this tool
(Jan 1, 2019 07:18 AM)Fictional Wrote: SHOW RUNTIME, how can you sell malware without showing runtime? Send me a copy and I'll do it for you if it's so hard... When buying any type of malware u must use a crypter because it will not and never be FUD.
It's not 'so hard' to post a runtime report , i just don't have a subscription on runtime checker website's,, also ill post a video soon describe the features.
Regards.
DO NOT DEAL WITH THIS MEMBER
(Dec 31, 2018 08:18 AM)RCE Wrote: Kardon don't have encrypted C&C,inline asm,dropper,watchdog...more ?
The point that the technical issues shouldn't be discussed here because this is a sale thread and El Lobo is not a potential customer to answer his questions btw his questions:
What does mean "Encrypted C&C (RC4)"?
-It means the communication between client and server is encrypted by RC4 algorithm which it generates PRNG.
Do you inject watchdog threads into already running processes? What does it mean aggressive persistence?
-Watchdog will monitor the changing of files/registry keys plus it injects itself into a process to achieve the goal, aggressive persistence means it monitor any changing/modification of its component to perform an instant action (Integrity checker)
How do you achieve hidden startup? By using run once reg key?
-The files and folders that used for startup are hidden , i didn't implement a ring3 rootkit beside the most hooking techniques are detectable by HIPS.
How do you bypass hips? Do you use hook evasion, if yes how? Does your bot use injection or it uses its own process?
-I'vent tested the RT detection, but the most functions are coded to evade some of AV's runtime detection like using random user agents, dynamic connection period, and others will not discuss here.
kardon have rc4 watch dog process can be added externally, most of all other functions can be achieved by gud stub packer so don't give bs dude ..if u legit send unencrypted pe32 file to my ib i will check and say its Kardon or not
(Jan 1, 2019 08:45 AM)hydra11 Wrote: kardon have rc4 watch dog process can be added externally, most of all other functions can be achieved by gud stub packer so don't give bs dude ..if u legit send unencrypted pe32 file to my ib i will check and say its Kardon or not
Nope you are totally wrong, kardon doesn't have any encrypted communication or watchdog, even the author didn't mention he has this, he was lying about his features,
take a minute to read this
https://www.bleepingcomputer.com/news/se...r-malware/
and for a sample I've answered before if u want a sample simply buy this software and u are free to analyze it otherwise i don't provide free stuff to anyone.
Regards.
Jan 1, 2019 11:39 AM
(This post was last modified: Jan 1, 2019 11:42 AM by Yattaze.)
(Jan 1, 2019 08:57 AM)RCE Wrote: Nope you are totally wrong, kardon doesn't have any encrypted communication or watchdog, even the author didn't mention he has this, he was lying about his features,
take a minute to read this
https://www.bleepingcomputer.com/news/se...r-malware/
and for a sample I've answered before if u want a sample simply buy this software and u are free to analyze it otherwise i don't provide free stuff to anyone.
Regards. Oh fuck off thouse features we're never mentioned in the sales thread, if your trashing Kardon so much why would you steal my panel
I'm not saying the original release of Kardon was good, and I never claimed it had the features from the devolpment thread, but it sold for only $50, you don't get world class malware for $50
I wasn't advertising discord I was letting people know where they can contact me, dick
(Jan 1, 2019 11:39 AM)Yattaze Wrote: Oh fuck off thouse features we're never mentioned in the sales thread, if your trashing Kardon so much why would you steal my panel
No it was mentioned but u edited ur thread, this malware researchers don't lie so u should fuck off
also panel is open source MDL lmao
(Jan 1, 2019 11:39 AM)Yattaze Wrote: Oh fuck off thouse features we're never mentioned in the sales thread, if your trashing Kardon so much why would you steal my panel
I'm not saying the original release of Kardon was good, and I never claimed it had the features from the devolpment thread, but it sold for only $50, you don't get world class malware for $50
(Jan 1, 2019 11:42 AM)RCE Wrote: No it was mentioned but u edited ur thread, this malware researchers don't lie so u should fuck off
also panel is open source MDL lmao
You directly stole and made edits to the panel, you were asking for a php Dev to make edits to "a ready made panel"
And I never made edits to the sales thread apart from vouches
I wasn't advertising discord I was letting people know where they can contact me, dick
(Jan 1, 2019 11:46 AM)Yattaze Wrote: You directly stole and made edits to the panel, you were asking for a php Dev to make edits to "a ready made panel"
And I never made edits to the sales thread apart from vouches
You are lying again,
05-23-2018, 08:33 PM (This post was last modified: 06-09-2018, 04:43 PM by Yattaze.)
It's clear that u edit ur sale thread and the malware research's made a screenshot so please stop lying.
Jan 1, 2019 01:07 PM
(This post was last modified: Jan 1, 2019 01:09 PM by Yattaze.)
(Jan 1, 2019 11:50 AM)RCE Wrote: You are lying again,
05-23-2018, 08:33 PM (This post was last modified: 06-09-2018, 04:43 PM by Yattaze.)
It's clear that u edit ur sale thread and the malware research's made a screenshot so please stop lying.
I told you I made edits to add vouches and correct tos, the screenshots from this devolpment thread, not from my sales thread.
Besides this is about your excuse of a bot, how you stole from my panel, your rc4 encryption is probably from the leftover code I left in the panel and a copy past from github to implement it in your bot, obviously from your inability to awnser simple technical questions about the prng or the rest of the bot.
You are disrespectful to anyone asking legitimate questions, or challenging you in anyway, it speaks to your quality as a person and malware dev
I wasn't advertising discord I was letting people know where they can contact me, dick
(Jan 1, 2019 01:07 PM)Yattaze Wrote: I told you I made edits to add vouches and correct tos, the screenshots from this devolpment thread, not from my sales thread.
Besides this is about your excuse of a bot, how you stole from my panel, your rc4 encryption is probably from the leftover code I left in the panel and a copy past from github to implement it in your bot, obviously from your inability to awnser simple technical questions about the prng or the rest of the bot.
You are disrespectful to anyone asking legitimate questions, or challenging you in anyway, it speaks to your quality as a person and malware dev
First of all i don't answer time waster questions, second thing i didn't take anything from ur shitty code's I've implemented my own codes without needing to prove anything.
disrespectful to dumb and time wasters yes because we as members must clean this garbage from HF.
(Jan 1, 2019 01:14 PM)RCE Wrote: First of all i don't answer time waster questions, second thing i didn't take anything from ur shitty code's I've implemented my own codes without needing to prove anything.
disrespectful to dumb and time wasters yes because we as members must clean this garbage from HF.
Thouse timewaster questions are things people need and want too know before investing $300 into a bot, also 90% of your panel is a 1:1 rip from Kardon, proofing you did use my code.
I wasn't advertising discord I was letting people know where they can contact me, dick
|